$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: It6YDAPsQZ1mYZAj+4dMY4/BVUUpufsGsoD8yfvp6v0= Subject key identifier: 8C:7D:61:9E:13:F7:44:43:D0:4C:C5:08:91:1F:A2:3B:68:31:31:F8 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 41397930C335EC70BB7DD96E0180BDDD56F0C27D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: B5 Signing time: Wed 20 Nov 2024 19:41:46 +0000 Manifest this update: Wed 20 Nov 2024 19:36:46 +0000 Manifest next update: Sun 24 Nov 2024 01:22:46 +0000 Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: cuXrpIojdfaSXbo6YNo0tn9udnt2tlUwYikL0X0AmUs=) 2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=) 3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:39:79:30:c3:35:ec:70:bb:7d:d9:6e:01:80:bd:dd:56:f0:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Nov 20 19:36:46 2024 GMT Not After : Nov 24 01:22:46 2024 GMT Subject: CN=8C7D619E13F74443D04CC508911FA23B683131F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:32:55:a3:55:a0:b7:6c:b1:45:b6:19:67: aa:fa:79:c8:8c:0c:4d:77:6d:49:ff:28:ad:eb:9b: f1:2a:a9:3a:ca:af:56:1a:4a:55:4f:60:c2:de:1e: 59:ce:81:c7:5c:5b:aa:ad:47:af:cd:80:d7:43:7e: 0c:07:f7:0c:19:7f:a3:99:63:df:81:66:35:76:d1: ff:67:0a:ee:b4:40:50:a7:ad:4c:e8:4c:f4:b3:4d: 44:4a:d6:76:cb:1d:63:20:52:23:ae:d0:b7:5c:de: 7b:c1:ee:b7:3b:09:b8:dc:4c:3b:b3:40:ed:6b:f3: 8b:0a:e9:23:7e:71:9d:d8:29:7c:de:dd:47:05:ae: af:a0:78:e0:de:e1:98:4c:fd:11:ab:05:f1:c9:7f: c1:81:41:48:41:32:94:f2:6c:73:23:ad:08:42:0b: ac:f4:b4:62:88:ee:d6:c1:dd:c7:bd:1b:8e:94:b3: 79:44:b3:00:67:94:a6:c9:d5:4a:0d:68:6e:1e:cd: b0:f8:e2:52:95:ed:d7:28:e4:f7:9f:d2:a2:83:33: 5b:b1:53:e7:45:89:01:9f:4d:2a:7f:5e:ee:8e:ba: 82:9d:99:78:8b:7e:86:97:3d:aa:b0:78:8c:e7:ca: 97:7f:f4:3e:fd:e9:92:20:6e:22:67:8d:1e:11:45: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:61:9E:13:F7:44:43:D0:4C:C5:08:91:1F:A2:3B:68:31:31:F8 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:21:7c:3c:e6:62:9b:97:f3:78:d7:a3:cf:53:5a:11:38: 8d:ee:c5:74:62:60:80:59:00:c3:c9:65:ac:35:92:d1:d6:08: 36:2c:59:f0:f4:15:54:44:30:3f:61:45:f8:96:55:a4:d4:5e: 1f:2b:4f:e0:d6:ba:6c:83:a7:34:c9:3c:77:47:a0:1a:d7:c5: 5b:d0:cf:75:27:7a:8b:1b:e8:89:f0:89:d2:e0:d0:b9:5b:9a: d3:58:29:ba:cd:f5:86:8e:68:06:f5:84:da:31:ad:89:6b:d5: 9a:6c:7f:63:ea:05:c8:e0:41:ff:48:bd:c2:f8:ca:5a:fa:92: d8:9b:12:2c:3d:11:67:15:7a:a3:11:99:ca:e3:37:f0:a4:2c: d5:75:01:71:c5:2d:32:d9:9e:4a:49:eb:f3:0e:2f:ca:76:2f: 84:44:0f:48:a0:22:de:ca:f5:6c:38:e5:11:48:64:f2:3f:aa: 09:5f:f4:e4:48:d1:42:7e:22:33:45:a2:02:79:69:54:49:0b: fb:d3:08:fb:1d:58:43:5e:a3:c5:2a:80:08:97:06:77:22:8d: 08:8c:7b:05:af:89:7d:a3:66:cb:0d:7a:37:eb:be:71:ba:e1: 8e:a2:42:c3:51:4d:61:73:8e:8d:ad:9d:69:c4:a3:9a:eb:4d: 3e:0d:10:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTl5MMM17HC7fdluAYC93Vbwwn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNDExMjAxOTM2NDZaFw0yNDExMjQwMTIyNDZaMDMxMTAvBgNV BAMTKDhDN0Q2MTlFMTNGNzQ0NDNEMDRDQzUwODkxMUZBMjNCNjgzMTMxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GTJVo1Wgt2yxRbYZZ6r6eciM DE13bUn/KK3rm/EqqTrKr1YaSlVPYMLeHlnOgcdcW6qtR6/NgNdDfgwH9wwZf6OZ Y9+BZjV20f9nCu60QFCnrUzoTPSzTURK1nbLHWMgUiOu0Ldc3nvB7rc7CbjcTDuz QO1r84sK6SN+cZ3YKXze3UcFrq+geODe4ZhM/RGrBfHJf8GBQUhBMpTybHMjrQhC C6z0tGKI7tbB3ce9G46Us3lEswBnlKbJ1UoNaG4ezbD44lKV7dco5Pef0qKDM1ux U+dFiQGfTSp/Xu6OuoKdmXiLfoaXPaqweIznypd/9D796ZIgbiJnjR4RRaVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjH1hnhP3REPQTMUIkR+iO2gxMfgwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo5IXw85mKbl/N416PPU1oROI3uxXRiYIBZ AMPJZaw1ktHWCDYsWfD0FVREMD9hRfiWVaTUXh8rT+DWumyDpzTJPHdHoBrXxVvQ z3Uneosb6InwidLg0LlbmtNYKbrN9YaOaAb1hNoxrYlr1Zpsf2PqBcjgQf9IvcL4 ylr6ktibEiw9EWcVeqMRmcrjN/CkLNV1AXHFLTLZnkpJ6/MOL8p2L4RED0igIt7K 9Ww45RFIZPI/qglf9ORI0UJ+IjNFogJ5aVRJC/vTCPsdWENeo8UqgAiXBncijQiM ewWviX2jZssNejfrvnG64Y6iQsNRTWFzjo2tnWnEo5rrTT4NEHA= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:51 2024 by rpki-client on console-fra.rpki-client.org